General
- Target Payload.exe
- Size 55KB
- Sample261109-2etchawsgt
- SHA256 6cf92f74dfc276d53aed0bd0a43c25158821d42a79ebfa45b75d6e2dfdc0d126
- MD5 22379a11a57c880f03d14fff0c556ae4
- SHA1 3ac3494a1b832088c5e18ad3311d1433c0804d0d
- SHA512 21394b18ebd57caf16a0f3bb46ac16b3abca376d188bac7b0061c0cb19a19085d272dc72634a95a48148c527d4aad35cff7feac8fde8c4cb52d7fd899045119a
- SSDEEP 1536:Uwws4DnAN7jytFADRwsNMDEXExI3pm3m:3T4DnA2PADRwsNMDEXExI3pm
- TLSH T15F432844BFEA4A01E2BD8F3468F655150634BA63E532EB1F48D668EB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win10ltsc2021-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Payload.exe
Resource
win11-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
Payload.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
34.tcp.cpolar.top:10221
Mutex
-
814d7e2969044b9c981ac2212e743817
Attributes
-
reg_key
814d7e2969044b9c981ac2212e743817
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 6cf92f74dfc276d53aed0bd0a43c25158821d42a79ebfa45b75d6e2dfdc0d126
- MD5 22379a11a57c880f03d14fff0c556ae4
- SHA1 3ac3494a1b832088c5e18ad3311d1433c0804d0d
- SHA512 21394b18ebd57caf16a0f3bb46ac16b3abca376d188bac7b0061c0cb19a19085d272dc72634a95a48148c527d4aad35cff7feac8fde8c4cb52d7fd899045119a
- SSDEEP 1536:Uwws4DnAN7jytFADRwsNMDEXExI3pm3m:3T4DnA2PADRwsNMDEXExI3pm
- TLSH T15F432844BFEA4A01E2BD8F3468F655150634BA63E532EB1F48D668EB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10